CN102473229B - 访问控制列表的修改 - Google Patents

访问控制列表的修改 Download PDF

Info

Publication number
CN102473229B
CN102473229B CN201080036676.6A CN201080036676A CN102473229B CN 102473229 B CN102473229 B CN 102473229B CN 201080036676 A CN201080036676 A CN 201080036676A CN 102473229 B CN102473229 B CN 102473229B
Authority
CN
China
Prior art keywords
acl
access control
control list
logical expression
union
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CN201080036676.6A
Other languages
English (en)
Chinese (zh)
Other versions
CN102473229A (zh
Inventor
S·格雷纳多
R·J·布罗德富埃雷尔
C·布赖恩特
S·严
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
International Business Machines Corp
Original Assignee
International Business Machines Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by International Business Machines Corp filed Critical International Business Machines Corp
Publication of CN102473229A publication Critical patent/CN102473229A/zh
Application granted granted Critical
Publication of CN102473229B publication Critical patent/CN102473229B/zh
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/604—Tools and structures for managing or administering access control systems

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Bioethics (AREA)
  • General Health & Medical Sciences (AREA)
  • Computer Hardware Design (AREA)
  • Health & Medical Sciences (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Automation & Control Theory (AREA)
  • Storage Device Security (AREA)
CN201080036676.6A 2009-08-28 2010-08-18 访问控制列表的修改 Expired - Fee Related CN102473229B (zh)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US12/549,955 US8250628B2 (en) 2009-08-28 2009-08-28 Dynamic augmentation, reduction, and/or replacement of security information by evaluating logical expressions
US12/549,955 2009-08-28
PCT/EP2010/062007 WO2011023606A1 (en) 2009-08-28 2010-08-18 Modification of access control lists

Publications (2)

Publication Number Publication Date
CN102473229A CN102473229A (zh) 2012-05-23
CN102473229B true CN102473229B (zh) 2015-04-01

Family

ID=42669472

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201080036676.6A Expired - Fee Related CN102473229B (zh) 2009-08-28 2010-08-18 访问控制列表的修改

Country Status (6)

Country Link
US (1) US8250628B2 (enExample)
JP (1) JP5497178B2 (enExample)
CN (1) CN102473229B (enExample)
DE (1) DE112010003464B4 (enExample)
GB (1) GB2484243B (enExample)
WO (1) WO2011023606A1 (enExample)

Families Citing this family (17)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102025603B (zh) * 2009-09-17 2015-01-28 中兴通讯股份有限公司 报文发送控制的方法、系统及注册、更新的方法及系统
US8510801B2 (en) * 2009-10-15 2013-08-13 At&T Intellectual Property I, L.P. Management of access to service in an access point
US10015169B2 (en) * 2010-02-22 2018-07-03 Avaya Inc. Node-based policy-enforcement across mixed media, mixed-communications modalities and extensible to cloud computing such as SOA
US20110321117A1 (en) * 2010-06-23 2011-12-29 Itt Manufacturing Enterprises, Inc. Policy Creation Using Dynamic Access Controls
JP5567053B2 (ja) * 2012-03-19 2014-08-06 株式会社東芝 権限変更装置、作成装置及びプログラム
US20140082586A1 (en) * 2012-08-09 2014-03-20 FatFractal, Inc. Application development system and method for object models and datagraphs in client-side and server-side applications
US9460300B1 (en) * 2012-09-10 2016-10-04 Google Inc. Utilizing multiple access control objects to manage access control
US9215075B1 (en) 2013-03-15 2015-12-15 Poltorak Technologies Llc System and method for secure relayed communications from an implantable medical device
US9477934B2 (en) * 2013-07-16 2016-10-25 Sap Portals Israel Ltd. Enterprise collaboration content governance framework
CN104145468B (zh) * 2014-01-13 2017-02-22 华为技术有限公司 一种文件访问权限控制方法及装置
US10223363B2 (en) * 2014-10-30 2019-03-05 Microsoft Technology Licensing, Llc Access control based on operation expiry data
EP3236382A4 (en) * 2015-02-09 2017-12-13 Huawei Technologies Co., Ltd. Method and controller for controlling application permissions
US10044718B2 (en) * 2015-05-27 2018-08-07 Google Llc Authorization in a distributed system using access control lists and groups
CN107566201B (zh) * 2016-06-30 2020-08-25 华为技术有限公司 报文处理方法及装置
CN108718320B (zh) * 2018-06-14 2021-03-30 浙江远望信息股份有限公司 一种以同类同配置物联网设备合规数据包交集形成数据包通信白名单的方法
CN108881216B (zh) * 2018-06-14 2020-12-22 浙江远望信息股份有限公司 一种以同类同配置物联网设备合规数据包并集形成数据包通信白名单的方法
CN116016387B (zh) * 2023-03-10 2023-06-13 苏州浪潮智能科技有限公司 访问控制列表生效控制方法、装置、设备和存储介质

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030200467A1 (en) * 2002-04-23 2003-10-23 Choy David Mun-Hien System and method for incremental refresh of a compiled access control table in a content management system
CN101039213A (zh) * 2006-03-14 2007-09-19 华为技术有限公司 一种通信网络中对用户的接入访问进行控制的方法
US20090064342A1 (en) * 2007-08-27 2009-03-05 Oracle International Corporation Sensitivity-enabled access control model

Family Cites Families (17)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6158010A (en) 1998-10-28 2000-12-05 Crosslogix, Inc. System and method for maintaining security in a distributed computer network
EP1143663B1 (en) 1999-06-10 2007-04-25 Alcatel Internetworking, Inc. System and method for selective LDAP database synchronisation
US6950819B1 (en) 1999-11-22 2005-09-27 Netscape Communication Corporation Simplified LDAP access control language system
US7185361B1 (en) 2000-01-31 2007-02-27 Secure Computing Corporation System, method and computer program product for authenticating users using a lightweight directory access protocol (LDAP) directory server
US7124132B1 (en) 2000-05-17 2006-10-17 America Online, Inc. Domain specification system for an LDAP ACI entry
US7440962B1 (en) 2001-02-28 2008-10-21 Oracle International Corporation Method and system for management of access information
US7392546B2 (en) 2001-06-11 2008-06-24 Bea Systems, Inc. System and method for server security and entitlement processing
US7356840B1 (en) 2001-06-19 2008-04-08 Microstrategy Incorporated Method and system for implementing security filters for reporting systems
US7167918B2 (en) 2001-10-29 2007-01-23 Sun Microsystems, Inc. Macro-based access control
US7024693B2 (en) 2001-11-13 2006-04-04 Sun Microsystems, Inc. Filter-based attribute value access control
AU2003239326A1 (en) 2002-05-01 2003-11-17 Bea Systems, Inc. Enterprise application platform
US7444668B2 (en) 2003-05-29 2008-10-28 Freescale Semiconductor, Inc. Method and apparatus for determining access permission
US7623518B2 (en) 2004-04-08 2009-11-24 Hewlett-Packard Development Company, L.P. Dynamic access control lists
US7895639B2 (en) 2006-05-04 2011-02-22 Citrix Online, Llc Methods and systems for specifying and enforcing access control in a distributed system
US20080127354A1 (en) 2006-11-28 2008-05-29 Microsoft Corporation Condition based authorization model for data access
US20090055397A1 (en) 2007-08-21 2009-02-26 International Business Machines Corporation Multi-Dimensional Access Control List
US20090205018A1 (en) 2008-02-07 2009-08-13 Ferraiolo David F Method and system for the specification and enforcement of arbitrary attribute-based access control policies

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030200467A1 (en) * 2002-04-23 2003-10-23 Choy David Mun-Hien System and method for incremental refresh of a compiled access control table in a content management system
CN101039213A (zh) * 2006-03-14 2007-09-19 华为技术有限公司 一种通信网络中对用户的接入访问进行控制的方法
US20090064342A1 (en) * 2007-08-27 2009-03-05 Oracle International Corporation Sensitivity-enabled access control model

Also Published As

Publication number Publication date
DE112010003464T5 (de) 2012-06-14
CN102473229A (zh) 2012-05-23
GB2484243A (en) 2012-04-04
US20110055902A1 (en) 2011-03-03
JP2013503375A (ja) 2013-01-31
JP5497178B2 (ja) 2014-05-21
DE112010003464B4 (de) 2019-05-16
WO2011023606A1 (en) 2011-03-03
GB201201636D0 (en) 2012-03-14
GB2484243B (en) 2015-09-30
US8250628B2 (en) 2012-08-21

Similar Documents

Publication Publication Date Title
CN102473229B (zh) 访问控制列表的修改
US10055561B2 (en) Identity risk score generation and implementation
US10148637B2 (en) Secure authentication to provide mobile access to shared network resources
CN101091369B (zh) 用于控制个人数据的装置和方法
US20040054791A1 (en) System and method for enforcing user policies on a web server
US8095963B2 (en) Securing resource stores with claims-based security
CN1507732A (zh) 授权访问服务器上的资源的方法和系统
US20100186082A1 (en) Web Management Authorization and Delegation Framework
US12335263B2 (en) Identity proxy and access gateway
Yang et al. An identity and access management architecture in cloud
US11153327B2 (en) Data classification and access control for cloud based data
CN112438040A (zh) 用于使用命名空间访问计算资源的系统和方法
US20150281281A1 (en) Identification of unauthorized application data in a corporate network
CN102972005B (zh) 交付认证方法
US8095969B2 (en) Security assertion revocation
CN103069767B (zh) 交付认证方法
US11171924B2 (en) Customized web services gateway
Taylor et al. Implementing role based access control for federated information systems on the web
CN100586123C (zh) 基于角色管理的安全审计方法及系统
WO2025152315A1 (zh) 一种权限管理的方法、装置、设备和存储介质
CN119522555A (zh) 计算机系统的安全性
Long et al. Attribute mapping for cross-domain access control
CN114365451A (zh) 源控制环境中的选择性安全增强
US12238098B1 (en) System for cross-domain identity management (SCIM) proxy service
CN113722723A (zh) 一种信息处理方法、系统、设备和计算机存储介质

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20150401

Termination date: 20200818